Vulnerabilidades en N/A
161.456 resultadosCVE-2013-6030—Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.1647EPSS 2.9%CVE-2017-16845—hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.EPSS 2.9%CVE-2022-35404—ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation EPSS 2.9%CVE-2020-12625—An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because EPSS 2.9%CVE-2002-0735—Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows EPSS 2.9%CVE-2021-27705—Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafteEPSS 2.9%CVE-2021-23406HIGHRemote Code Execution (RCE)EPSS 2.9%CVE-2007-6086—Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via dirEPSS 2.9%CVE-2022-28347—A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occursEPSS 2.9%CVE-2016-10188—Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute EPSS 2.9%CVE-2014-4337—The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a deEPSS 2.9%CVE-2009-3631—The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM exteEPSS 2.9%CVE-2019-12144—An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a pathEPSS 2.9%CVE-2018-12602—A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.EPSS 2.9%CVE-2007-2464—Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPEPSS 2.9%CVE-2017-6508—CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headEPSS 2.9%CVE-2017-9349—In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.EPSS 2.9%CVE-2019-12017—A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handleEPSS 2.9%CVE-2019-16213—Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sendEPSS 2.9%CVE-2018-18541—In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remoteEPSS 2.9%